This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/323830313a3135393a3a2f34342d3434203d3e20323733383239.roa
File:                     323830313a3135393a3a2f34342d3434203d3e20323733383239.roa (raw, json)
Hash identifier:          Qrqi8ah4e0sqlYAJtA7/Pu5R8RpIvFw9csoHBRqCBYA=
Subject key identifier:   C4:51:A9:E6:CD:2C:4F:BC:00:59:B2:08:AC:C8:42:3B:E7:C9:2A:AF
Certificate issuer:       /CN=BF2E52DA2A365D5C3062E5F29659D4C1A371FF33
Certificate serial:       708DCE645685C918A8BF252EBE08A40B2F271C14
Authority key identifier: BF:2E:52:DA:2A:36:5D:5C:30:62:E5:F2:96:59:D4:C1:A3:71:FF:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/323830313a3135393a3a2f34342d3434203d3e20323733383239.roa
Signing time:             Tue 25 Nov 2025 21:50:00 +0000
ROA not before:           Tue 25 Nov 2025 21:45:00 +0000
ROA not after:            Tue 24 Nov 2026 21:50:00 +0000
asID:                     273829
IP address blocks:        2801:159::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 22:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:8d:ce:64:56:85:c9:18:a8:bf:25:2e:be:08:a4:0b:2f:27:1c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF2E52DA2A365D5C3062E5F29659D4C1A371FF33
        Validity
            Not Before: Nov 25 21:45:00 2025 GMT
            Not After : Nov 24 21:50:00 2026 GMT
        Subject: CN=C451A9E6CD2C4FBC0059B208ACC8423BE7C92AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ea:22:f8:c2:18:41:02:f2:f2:de:f4:54:8d:
                    23:46:6e:c8:57:85:80:f4:51:8b:d9:95:aa:b7:0b:
                    a9:4f:00:89:a5:b3:c2:13:0f:8d:be:67:90:e0:d6:
                    ca:2e:37:80:58:1e:70:db:48:ad:f5:e3:bb:fc:d7:
                    b6:be:17:c6:31:19:ec:52:b3:0e:2b:77:1b:54:77:
                    00:35:a1:a8:5f:19:3c:07:3a:95:99:34:a9:af:07:
                    3b:90:67:71:31:fd:b3:55:1a:60:11:23:49:8a:4e:
                    ce:d8:a1:15:66:ac:07:9f:fb:0f:71:d0:ad:4a:85:
                    f3:86:06:19:da:ff:d3:83:f6:88:19:1f:b1:ff:35:
                    71:18:be:f6:86:d1:2c:4c:95:41:fa:12:10:40:5f:
                    94:ad:e9:a8:47:37:25:d8:5f:cc:35:97:11:ac:e3:
                    5b:6b:2f:11:d8:b1:2b:37:e4:b1:77:d4:d5:5a:44:
                    00:42:18:20:2a:e1:9f:1c:83:53:e3:ad:3c:19:b3:
                    34:94:de:39:6b:6c:31:97:4f:25:7d:9b:ea:d6:53:
                    ec:9f:6c:7f:98:5f:8b:b4:44:cb:3a:dc:48:b9:cc:
                    c5:f9:69:b2:75:c4:21:28:a3:8a:64:71:23:6e:52:
                    2d:c5:09:5c:03:38:e1:75:b7:05:ca:40:2f:c8:c0:
                    da:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:51:A9:E6:CD:2C:4F:BC:00:59:B2:08:AC:C8:42:3B:E7:C9:2A:AF
            X509v3 Authority Key Identifier:
                keyid:BF:2E:52:DA:2A:36:5D:5C:30:62:E5:F2:96:59:D4:C1:A3:71:FF:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/323830313a3135393a3a2f34342d3434203d3e20323733383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:159::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:79:82:f3:13:ec:8e:40:c7:d8:54:54:d1:e8:13:71:80:7a:
         8a:b5:d3:5e:0d:d1:c2:d9:9f:0b:b3:3f:3c:13:73:07:60:0f:
         c1:85:d8:a8:1a:c0:34:55:73:b8:f9:f3:12:aa:29:06:9a:94:
         af:ca:8d:26:0d:b2:1d:f5:40:da:7c:35:b3:c7:61:27:ed:c1:
         93:e2:00:eb:90:08:60:19:ec:0a:03:c1:14:dc:a2:5b:f4:6e:
         3d:1b:8e:a8:ec:d3:63:65:37:d8:e7:1f:76:3d:e9:6b:ba:39:
         4e:bc:88:70:91:d0:85:20:41:03:a8:64:85:bb:6f:9d:f7:f0:
         84:bc:f0:de:d8:57:21:1d:fc:86:25:ef:26:59:31:1f:02:91:
         13:ea:34:29:4b:0d:33:b7:64:e1:1c:75:a5:8c:b8:29:7a:57:
         d6:3a:d5:af:5a:fe:13:9a:3c:73:25:37:75:ca:46:20:f4:6f:
         a7:32:09:5a:8e:71:1e:a0:2d:16:7a:ea:c9:5a:36:10:9a:9a:
         41:54:74:d1:11:d8:60:53:c9:33:de:62:28:b2:69:0c:e7:64:
         69:a4:69:bd:fd:7c:67:bf:25:f7:8a:81:8b:3a:3c:ce:61:d2:
         d2:21:a4:0e:8a:33:a5:9e:7f:c6:58:d6:d4:25:8e:76:9a:32:
         d9:5e:a0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:38:50 2025 by rpki-client